Noted that the threshold in service-limit filter is an optional field. If
not mentioned on the policy, the default value is 80.

Global Services

Services like IAM are not region-based. Custodian will put the limit
information only in us-east-1. When running the policy above in multiple
regions, the limit of global services will ONLY be raised in us-east-1.

Additionally, if you want to target any the global services on the policy, you
will need to target the region as us-east-1 on the policy. Here is an example.